adding test for t1505.005, fixing issue with existing test to simulat…

…e termsrv.dll patching
redcanaryco · Oct 18, 2023 · 4443753 · 4443753
1 parent 51d2e10
commit 4443753
Showing 1 changed file with 0 additions and 1 deletion.
diff --git a/atomics/T1505.005/T1505.005.yaml b/atomics/T1505.005/T1505.005.yaml
@@ -29,7 +29,6 @@ atomic_tests:
   description: This atomic test simulates the modification of the ServiceDll value in HKLM\System\CurrentControlSet\services\TermService\Parameters. This technique may be leveraged by adversaries to establish persistence by loading a patched version of the DLL containing malicious code.
   supported_platforms:
   - windows
-  input_arguments: 
   dependency_executor_name: 
   dependencies: 
   executor: